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DEVICES 

The present invention relates to a device and in particular but not exclusively to a 
device which provides access to an entity. 

5 

Wireless cellular networks are known in which the area covered by the "network Is 
divided into a number of cells. Each cell is served by a base transceiver station. 
The base transceiver station Is arranged to communicate with mobile stations in 
the cell associated with the base station. The mobile stations establish via the 
1 0 base station a connection with another user, a fixed line telephone or the Internet. 

Programmable keys are known. For example, plastic cards with magnetic strips 
are used as keys to open locks to for example doors or the like. The use of such 
keys is disadvantageous in that different keys are provided to access different 
15 entities and therefore need to be carried by the user. 

It has been proposed to allow multiple users access to the same entity. For 
example, a front door to an office may be accessed by a number of users or a 
hotel room may be accessed by different users at different times.- It is necessary 
20 ' for the accessed entity to have a database or similar to keep a record of the 
authorised users. .It is disadvantageous if a database or similar needs to be 
associated with the accessed entity. For example, in a hotel, to have a database 
associated with each lock would be costly. 

25 It is an aim of embodiments of the present invention to address one or more of 
the problems discussed earlier. 

According to a first aspect of the present invention there is provided an access 
device comprising means for receiving a key and validity information, wireless 
30 communication means for establishing a connection with another party, said 
wireless communication means being arranged to provide said key and said 
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validity information to said another party, wherein If said key and said validity 
information are determined by the another party to De valid access Is provided. 

According to a second aspect of the present invention there is provided an access 
5 method comprising the steps of receiving a key and validity information, 
establishing a wireless connection with another party, providing said key and said 
time related infomiation to said another party, and checking at said another party 
if said key and said time related infomiation are valid and if so providing access. 

10 For a better understanding of the present invention and as to how the same may 
• b© carried into ©ffoct reference will now be made by way of example to the 
accompanying drawings in whioh:- 

Figure 1 shows a schematic diagram of a cellular network; 
15 Figure 2 shows a block diagram of a mobile siaTion embodying the present 

invention; 

Figure 3 shows a block diagram of the entities with which the mobile station 
communicates; 

Figure 4 shows the Bluetooth device of Figure 3 in more detail: and 
20 Figure 5 illustrates the method embodying the present invention. 

Reference is made to Figure 1 which shows a cellular network 2. The area 
covered by the network 2 is divided into a plurality of cells 4. Three cells 4 are 

;t should be aooreciated that in networks there will 

25 typically be many more cells. 

Each cell 4 has associated therewith a base transceiver station 6, Each base 
transceiver station 6 is arranged to receive signals from and send signals to 
mobile stations 8 in the cell associated with the base station 6, Depending on the 
30 method of communication, the mobile stations may communicate with the base 
stations of adjacent cells. In some embodiments of the present invention, a 
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mobile station may be able to communicate with two or more base stations at the 
same time. 

The mobile stations and base transceiver stations typically use radio frequency 

5 signals to communicate. The base stations and mobile stations may use a 
frequency division multiple access technique. This means that the' available 
frequency spectrum is divided up Into a number of bands and the mobile station 
will be allocated a given frequency to communicate with the base station with the 
base station being allocated another frequency to communicate With the mobile 

10 station. Generally, the frequencies will be different but this is not essential. The 
rr^obile stations and the base stations may use a time division multiple access 
technique. With this method, a frequency band is divided up into a number of time 
slots and a mobile station is allocated a given one of those time slots to 
communicate with the base station and vice versa. In the GSM (global system for 

15 mobile communication) standard, a combination of frequency division multiple 
access and time division multiple access is used. Spread spectrum techniques 
such as code division multiple access may also be used. In this technique, 
different spreading codes are used by different mobile -stations so that the signals 
from the different mobile stations can be distinguished. Similariy, the different 

20 base stations will use different spreading codes. In the third generation system, a 
wideband CDMA system has been proposed. It should be appreciated that in 
embodiments of the present Invention, any of these techniques may be used 
either on their own or together. It is of course possible that any other suitable 
techniques may be used. 

25 

Reference is now made to Figure 2 which shows a block diagram of a mobile 
station embodying the present invention. The mobile station 8 has a first antenna 
10. The first antenna 10 is arranged to receive signals from the respective base 
transceiver station 6. The first antenna 10 is also an-anged to transmit signals to 
30 the base station 6. 
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The signals received by the first antenna 10 are fonA/arded to a radio frequency 
transceiver 12. The radio frequency tran^cer/er 12 will down conven: the radio 
frequency signals to a baseband frequency. The radio frequency transceiver may 
perform other functions such ae decoding, demodulation or the like. The received 

5 information at the baseband frequency Is fonwarded by the radio frequency 
• transceiver 12 to a processor 14 which extracts the necessary information from 
the received signal. The processor 14 may be an-anged to provide an output 
which is connected to a speaker which may provide received voice signals. The 
processor 1'V may receive control information from the base station which is used 

10 to control the mobile station or the like. The processor 14 may also extract 
infom^atlon which is to be displayed and display that information on a display 16, 
The processor may also receive an input from a user interface such as a 
keyboard or the like. 

15 The processor 14 is also used to process signals to be transmitted by the first 
antenna 10 and may also receive an output from for example a microphone or the 
like. The signals which are to be transmlttod by the first antenna are output by the 
processor 14 at the baseband frequency. The radio frequency transceiver 12 
upconverts the baseband signals to the radio frequency and fonA/ards them to the 

20 first antenna 10 for transmission. The radio frequency transceiver may encode the 
information, modulate it or carry out any other processing of the signal 

The radio frequency transceiver 12 may be connected to a memory 18. The 
IS isi arranged to stj5re sorne Information received by the radio frequency 
25 transceiver. In alternative embodiments of the present invention, the memory may 
be connected to the processor 14 and so may receive infonnation via the 
processor- 

yi^e mobile station 8 has a second antenna 20. The second antenna 5s arranged 
30 to receive and transmit signals in the Bluetooth range of frequencies. Bluetooth is 
- a standard which has been proposed for short range, low power, high frequency 
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signals. Typically, the signals will be of the order of giga Hertz. The second 
antenna 20 is arranged to receive Bluetooth signals fronn a Bluetooth device. The 
signals received by ihe second antenna are fon^varded to a Bluetooth transceiver 
22, The Bluetooth transceiver 22 performs similar functions to the radio frequency 
5 transceiver 12. In particular, the Bluetooth transcelvsr 22 downoonverts the 
received signals to a baseband frequency. If required, the Bluetooth transceiver 
may demodulate and decode the received signal. The received signals may be 
fonwarded to the processor 14 for further processing. 

10 The Bluetooth transceiver 22 is also arranged to receive information from the 
processor 14. The received information is at the baseband frequency and the 
Bluetooth transceiver upconverts the signals to the Bluetooth frequency so that 
they can be transmitted by the second antenna. If required, the Bluetooth 
transceiver 22 will modulate, encode and perform any other required function. 

15 

The, Bluetooth transceiver 22 Is an^nged to have access to the memory 18 and 
can retrieve information stored therein. In alternative embodiments of the present 
invention, the information may be retrieved by the processor from the memory 
and forvA/arded to the Bluetooth transceiver 22- 

2Q 

Reference will now be made to Figure 3 which schematically illustrates 
embodiments of the present invention. The mobile station a is arranged to have a 
Bluetooth connection with a Bluetooth device 24. This means that signals are 
cx^chsngad bet.veen the mobila device and the Bluetooth device in accordance 
25 with the Bluetooth standard. With the Bluetooth standard, two devices are able to 
communicate directly without going via for example a base station. 

In embodiments of the present invention, It is proposed that the Bluetooth device 
b© a lock or an access device. For example, the Bluetooth device may be 
30 provided on a hotel door The Bluetooth device may be part of an access device. 
For example, the access device 24 may permit access to a cinema, public 
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6 

• transport, a ski lift or the like. Alternatively, the Bluetooth device may far example 
be incorporated in a rental car or the like. Embodiments of the present invention 
are particularly suitable for allowing access to a given user temporarily. However, 
embodiments of the present invention can be used in other situations, 

5 

The communications between the mobile device and the Bluetooth device 24 are 
via the second antenna 20 of the mobile station 8, 

Reference is made to Figure 4 which snows the Bluetooth device 24 of Figure 3 in 
10 more detail. The Bluetooth device 24 has an antenna 25. This antenna 26 Is 
arranged to receive and transmit signal© at the Bluetooth frequency. More 
particularly, the antenna 26 is aranged to transmit signals to the second antenna 
of the mobile station and to receive signals therefrom. The Bluetooth device has 
an upconverter 28. The upconverter 28 is arranged to upconvert signals from a 
15 baseband frequency to the Bluetooih frequency for transmission by the antenna 
26. The upconverter 28 may carry out other functions such as modulation, 
encoding or any other suitable function. 

The signals which are received by the antenna 26 are processed by a 
20 downconverter 30 which reduces the frequency of the received signals from the 
Bluetooth frequency to the baseband frequency. Again, the downconverter 30 
may perform other functions such as demodulation or decoding. 

Tne signals which ars received by the antenna 26 and down converted by the 
25 downconverter 30 are output to a processor 32 which is able to process the 
• received signals further. Likewise, the processor 32 is an^nged to output those 
signals which are to be transmined to the upconverter 28. The Bluetooth device 
24 also has a memory 34 which is used to store Information. This will be 
described in more detail hereinafter. 
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Referring bacK to Figure 3, the mobile station is also able to communicate with 
the base transceiver station 6 using the first antenna 10. The base transceiver 
station provides a connection to other elements of a network 33. The network 36 
is connected to a gateway element 38 which, usually >s part of the network 36. 
5 The gateway element 38 allows the network to b© connected to an external entity, 
such as another network, the Internet or a server 40 of a service provider. 

Reference will now be made to Figure 5 which shows a flow diagram of the steps 
of the method embodying the present invention and illustrates how empodiments 

10 of the present invention work. The mobile station S is arranged in step Si to 
establish a connection with the network 36 via the base transceiver station 10. In 
the embodiment described, the mobile station is a WAP (wireless application 
protocol) mobile station. However, it should be appreciated that the mobile device 
may be in accordance with any other protocol and may for example be able to 

15 use the short message servicing SMS feature in embodiments of the invention. 
The network is also arranged to establish via the gateway 38 a connection wiih a 
server. This server 40 is associated with the service provider For example, if 
embodiments of th© present invention are to be used to allow access to hotel 
rooms, then the server 40 would be associated with the hotel. As an alternative 

20 the mobile station 8 could also access the server provider via a Bluetooth 
transceiver connected to the server. In this way the mobile station can get the 
Key over the Bluetooth connection Without the need for network connection, cost 
would also be reduced. If however an order for a service(for example a hotel 
room) was made In advance the key couid be obtain&u remstsiy via the bass 

25 transceiver station 10 using WAP or SMS. 

In the second step S2. the server 40 provides the mobile station with key 
information and additional infomiatlon. For example, in the context of a hotel, the 
additional Information could take the form of the hotel room. In this particular 
30 embodiment, the key and additional infomigtion are downloaded to the mobile 
station in the same call where the mobile station establishes the connection. 
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However, in alternative embodiments of the present invention, it Is passible that 
the mobile station in step 1 establish a WAP connection and provides an 
indication to the sen/er as to the particular service required. The server may then 
cause the mobile station to be called bacK with the required key and additional 
5 information. 

The key information which is sent to the mobile station is usually encrypted. The 
whole of the key may be encrypted or only part of the key may be encrypted. In 
alternative embodiments of the present invention, the key rriay not be encrypted. 

1 0 tf the key is encrypted, the mobile station may be able to decrypt all or part of the 
key information. However, in prefenred embodiments of the present invention, the 
mobile station is not able to decrypt the key information. The additional 
information uvhich is sent to the mobile station may also be encrypted but this is 
not necessary. Where this additional information is encrypted, the mobile station 

15 will usually be able to decrypt that information. For example, if the additional 
information relates to a room key, the user will need to know which hotel room the 
user is allowed access to. This additional information may bo communicated to 
the user. For example, the information may be displayed on the display or may 
take the form of a voice message. Once the additional information has been 

20 received by the mobile station, the connection with the server 40 Is temiinated. 

In the next step, step S3, the mobile station Is arranged to establish a Bluetooth 
connection with the Bluetooth device 24. The connection with the Bluetooth 
device 24 can take place some time after the first two steps are being oomplstsd. 
25 As indicated previously. Bluetooth is a standard which has been proposed to 
permit the direct communication between two devices. One feature of the 
Bluetooth standard is that each packet is transmitted with a different frequency. 

Once the Bluetooth connection has been established, in step S4 the mobile 
30 station sends the key information to the Bluetooth device. This may be in 
response to a request from the Bluetooth device for the key. 
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In step 65, the Bluetootn device will check the validity of the Key. In particular, the 
Bluetooth device attempts to decrypt the Keys and will compare It with Key 
information which it has stored thereon, 

5 

In step S6, if the key Is valid, then the Bluetooth device 24 will provide access for 
example to the room. 

In embodiments of the present invention, it Is envisaged that the mobile station 
1 0 could be used to store more than one Key. So that the Bluetooth device 24 is able 
to receive the correct key, it is preferred that each key has an identification tag 
which Identifies the service provider. The Bluetooth device would in its request 
sent to the mobile station for the key Include this information identifying the 
associated sen/ice provider. The mobile station would then only send the key(s) 
1 5 which have the tag associated with the given service provider. Where a number of 
different keys are associated with the given service provider, the Bluetooth device 
could try all of the keys to see which one matches. It is of course possible in 
embodiments of the present invention that each Bluetooth device has a unique 
identity tag so that the mobile station only sends the key which matches that 
20 identity tag provided by the Bluetooth device. 

In alternative embodiments of the present invention, the mobile station may 
provide all of the keys which it has to the Bluetooth device which will then test all 
of them in order to determine which key is the correct key. This msy be less. 
25 preferable In those embodiments where security is of importance. 

The Key may have a time limit beyond which It Is not valid. For example, a hotel 
room key may be only valid for the time that the user stays in the hotel. 
Accordingly. In some embodiments of the present invention, time information may 
30 form pari of the key. Alternatively, there may be separate information provided 
relating to time information. The Bluetooth device, when detenninina if the key is 
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valid or not. will check to see whether or not ihe Key is still valid. The time 
information may take any suitable format such as a start time and/or an end time 
or any other suitable format For this, the Bluetooth device will require access to a 
clock. That rnay be part of the Bluetooth device Itself or the information may be 
5 provided by the mobile station. 

In embodiments of the present invention, asymmetric encryption or symmetric 
encryption may be used. With symmetric encryption, the same key is used for 
encrypting as for decrypting. With asymmetric encryption, different keys are used 
10 for encryption and decryption. For example, public and private keys may be used; 
Thus, the data may be encrypted with a public key which is woll known and 
decrypted with a private key which is only known to a given user. It should be 
appreciated that any suitable form of encryption and decryption could be used. 

15 . In order to further increase the security, a hash code can be applied to the key 
data. 

It should be appreciated that any suitable way of transmitting key data securely 
between the server, the mobile station and the Bluetooth device may be used. In 
20 many of these forms the BTS and GW would not be needed. 

In embodiments of the present invention, the mobile device has been described 
as being a mobile station. It should be appreciated that any suitable device can 
be used. Far example, items such ss wrist watches could b© modified so as to 
25 provide the functions of the embodiments of the present invention. Indeed, 
dedicated devices may be provided in order to perform the functions of 
embodiments of tne invention. It has been proposed to provide a credit card type 
device which has the capability of making radio connections. Embodiments of the 
present invention may be incorporated in such devices, 

30 
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in embodiments of the present invention, the mobile station has been described 
as using the Bluetooth protocol, however, in alternative embodiments of the 
present invention, different radio frequencies can be us^d. For example, infrared, 
^i^^l^ss l^l^ and HomeRF could be used instead of the Bluetooth . 

5 

Embodiments of the present invention may be used in a wide range of situations. 
For example, the mobile station 8 may receive from the server a ticket for a 
sporting event, theatre or cinema. The mobile station may receive from the sen/er 
a key which allows a rentea car to be driven. The mobile station may receive 

10 tickets which allow the user to travel on public transport such as aeroplanes, 
buses or trains. Embodiments of tlie present invontion may be arranged to 
provide access to for example ski lifts. Embodiments of the present invention are 
particularly applicable to the provision of temporary access for example to a hotel 
or access to a cinema. However, embodiments of the present invention can be 

1 5 used to permit a user to obtain access to more permanent services. For example, 
embodimeni:s of the present invention can be arranged to allow a user to access 
their office or homo- 

The additional information will be appropriate for a particular service. In the 
20 context of a hotel room, the additional Information will take the form of the room 
number. In the case of car rental, the additional information will take the form of 
the registration number of the car and/or a reference. In the case of tickets to an 
event, the information may take ths form of the seat information. The additional 
inforfnauon msy siso provida time information. For example, the amount of time 
25 for Which a hotel room is available may be Included. In embodiments of the 
present invention, the same technique can be used to obtain more user time. For 
example, in the case of a rental car the user may use the same technique in order 
to obtain a longer rental time, 

30 In embodiments of the present invention, there is no need to connect each of the 
Bluetooth devices together to a central control element. This is because of the 
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provision of information relating to the time for which the key Is valid. In the case 
of a locK, the key used by the lock does not have to be continually changed. For 
example, a hotel room may be validly opened by a user one day but if the user 
has not requested the room for an additional day. the user vsflil not be permitted to 

5 enter that room on the next day. Thus, the need for additional infra structure 
connecting the Bluetooth devices can be avoided. The validity time for the key 
can be in the non-encrypted part of the key so that the mobile station can remove 
it automatically. Also this would allow the Bluetooth device to send a request to 
the mobile station to remove the key. As an alternative rather than a valid time 

1 0 • information any other validity infonnation indicating the validity of a user or validity 
of use of the item being accessed can be transferred. For ej<ample s maximum 
speed for a hire car during use could be stipulated. 

The access key is stored in the memory 18 of the mobile station. Alternatively, the 
15 access key may be stored in an integrated part of the device for example on a 
smart card. The key information is also stored in the memory 34 of the Bluetooth 
device. Again, the information may be stored in any other suitable location in the 
Bluetooth device. 



20 Mobile stations or devices embodying the present invention may store any 
number of different keys for different purposes. 

In alternative embodiments of the present invention, the mobile station may be 
arranged to provide the Biastcoth device with user identification information. This 

25 may be part of the key or separate therefrom. This information can be used to 
provide additional security. For example, in the car rental situation, the user may 
be required to Identify himself by entering a personal identification number code 
to prevent misuse or crime. Additionally the key may be stored in the part of the 
memory which requires the user to enter their personal identity number (PIN). 

30 Without the PIN the mobile station will not send the key. Additionally each key 
can be provided with its own PIN. The user needs to know the PIN in order to 
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use the key. The mobile station sends the key together with the PIN (the PIN 
could be, for example, part of the key for decryption). Funhermore no PIN might 
be required- 

5 U is preferred that the validity time for the key be encrypted, Thi$ means that the 
mobile station can automatically delete those keys which are out of date. 

The keys are preferably stored in a tamper proof memory which may be an ASIC, 
smart card or the like. 

10 

In alternative embodiments of the present invention, a single antenna may be 
provided in the mobile station and the key information and the like may be 
provided to the mobile station using the same antenna which is used to send the 
key information to the accessed entity. That single antenna may be arranged to 
15 use the Bluetooth standard or the usual mobile station frequencies. 



VAST. OTTO 31-05-01 11:39 



MISTA- +358 10 5057115 



KENELLENOKIA 



SiVU 14 



31-05-01 12:24 MISTA -NOKIA + K-317 S. 15/20 T-799 

31/U^ Ul IHU XA.«*0 lita i«<«w mt 

14 

CLAIMS 

1 . An access device comprising: 

means for receiving a l<ey and validity information : 
5 wireless communication means for establishing a connection with another 

party, said wireless communication means being arranged to provide said key 
and said validity infomnation to said another party, wherein if said key and said 
validity information are detemnined by the another party to be valid access is 
provided. 

10 

2. A device as claimed in claim 1, wherein said receiving means Is arranged 
to receive additional information relating to the another party. 

3. A device as claimed in claim 2, wherein said additional information is 
1 5 available to a user of said access device. 

.4. A device as claimed in claim 3, wherein said device comprises a display 
and said display Is arranged to display said additional information. 

20 5. A device as claimed in claim 3 wherein said device comprises a speaKer 
and said speaker is arranged to provide said additional information audibly. 

6. A device as claimed in any preceding claim, wherein said means for 
r^<^h,■,r^r. kev and validity information comprises a wireless communication 

25 means. 

7. A device as claimed in claim 6, wherein said wireless communication 
means for receiving said key and validity information operate at different 
frequencies to the wireless communication means for establishing a connection. 

30 ■ 
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8. A device as claimed in any preceding claim, wherein said wireless 
communication means for establishing a connection uses high frequency signals 
of the order of gig a Hertz. 

5 9. A device as claimed in any preceding claim, wherein said wireless 
communication means for establishing a connection uses low power signals. 

10. A device as claimed in any preceding claim, wherein said wireless 
communication means for establishing, a connection uses Bluetooth' signals, 

10 

11. A device as claimed in any of claims 1 to 9, wherein said wireless 
communication means for establishing a connection uses infra red signals. 

12- A device as claimed in any preceding claim, wherein said device is 
1 5 arranged to have more than one key at the same time. 

13. A device as claimed in any preceding claim, wherein each key has an 
identifier associated therewith, said another party being arranged to provide 
identification information, said device being an-anged to provide the or each key 

20 which has the identifier associated with the received identification information to 
• said another party. 

14. A device as claimed in claim 13, wherein said identifier identifies a service 

pr o V IImIOI . 

25 

15. A device as claimed in any preceding claim, vy/herein said device provides 
access to one or more of the following; 

hotel room; theatre; cinema; hire can ski lift; public transport; or office. 

30 16, A device as claimed in any preceding claim, wherein said device comprises 
a memory for storing said key. 
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17. A device as claimed in any preceding claim, wherein at least part of said 
key and/Qr said validity Information are at least partly encrypted. 

5 18. A device as daimed in claim 17. wherein at least part of said l<ey ie not 
decryptable by said device. 

19. A device as claimed in any preceding claim, wherein said device is 
arranged xo provide to said anoiher party information identifying me user of said 
10 device. 

• 20. A device as claimed in claimed in any preceding claim wherein said validity 
information comprises time related information. 

15 21, An access system comprising a device as claimed in any of the preceding 
claims in combination with said another party. 

22. A system as claimed in claim 21, wherein said another party comprises 
means for detenrtining if the l^ey and validity information received from said 

20 access device are valid- 

23. An access method comprising the steps of: 
receiving a key and validity information ; 
astaijiishing s w-retess connection with another party; 

25 providing said key and said time related infomnation to said another party,; 

and 

Checking at said another party if said key and said time related information 
are valid and if so providing access. 

30 24- A method as claimed in claim 23 wherein said validity information 
comprises time related information. 
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25. A device as claimed in any preceding claim, wnerein said device Is a 
mobile station. 
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31 May, 2001 12:47 

Patent-Agency Antonelli (EXT-RES/HeisinKi) 

Aarnio Ari (NVO/Helsinki) 

RE: 27014: 017-39011X00 (-> part IV) 



Dear Bob: 



Anrached please find che sofc copy of the foreign reference ciued in Leena * s leuter on 
March 23. 2001. 

Our ref: NC32538 
Appl no: GB 002 519 8 ,3 

Formal Title: Electronic authorisations 

Title of invention report; Transferring Tickets Becween Mobile 
Devices Using Electronic Business Cards 
Priority Dare: 13 October, 2000 
(end . NC33253S .doc) 



I will send you che figures (1 & 2) through telefax. 



If you have any questions or coininentSr please feel free co contact us. 
Best regards, 



Tea Huovinen 

IPK ASSiSCant 

Ven cu re s Organx z a c 4. on 

Nokia Corporation 

P.O.Box 228, FIN- 0004 5 NOKIA GROUP 

Tel. -^358 7180 62199. Mobile t358 40 759 36c3. Fax +358 7l80 62010 
mdxlto: cea .huovanen^iio>:id - com 
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Inserting information associated with an 
authorisation in at least one jfteld of an electronic 
business card 







Transmitting the electronic business card to a mobile 
usex device 






Upon receipt of the electronic business card at the 
mobile user device, recognising that it contains 
information associated with an authorisation 






Processing the authorisation information in a 
predefined manner so that the user device can be 
used as an authorisation means 




ir 


Using the user device to be authorised to do an act 
requiring authorisation 



Fig. 2 
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